2014-01-29 15:05:09 +00:00
|
|
|
--- conf/cupsd.conf.in.orig 2014-01-29 14:31:32.000000000 +0100
|
|
|
|
|
+++ conf/cupsd.conf.in 2014-01-29 15:20:30.000000000 +0100
|
|
|
|
|
@@ -136,6 +136,39 @@ WebInterface @CUPS_WEBIF@
|
|
|
|
|
</Limit>
|
|
|
|
|
</Policy>
|
|
|
|
|
|
2011-10-06 09:36:19 +00:00
|
|
|
+# The policy below is added by SUSE during build of our cups package.
|
2010-03-18 22:08:54 +00:00
|
|
|
+# The policy 'allowallforanybody' is totally open and insecure and therefore
|
|
|
|
|
+# it can only be used within an internal network where only trused users exist
|
2010-11-12 08:51:26 +00:00
|
|
|
+# and where the cupsd is not accessible at all from any external host, see
|
|
|
|
|
+# http://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
|
2010-03-18 22:08:54 +00:00
|
|
|
+# Have in mind that any user who is allowed to do printer admin tasks
|
2010-11-12 08:51:26 +00:00
|
|
|
+# can change the print queues as he likes - e.g. send copies of confidental
|
|
|
|
|
+# print jobs from an internal network to any external destination, see
|
|
|
|
|
+# http://en.opensuse.org/SDB:CUPS_in_a_Nutshell
|
2010-03-18 22:08:54 +00:00
|
|
|
+# For documentation regarding 'Managing Operation Policies' see
|
2011-10-06 09:36:19 +00:00
|
|
|
+# http://www.cups.org/documentation.php/doc-1.5/policies.html
|
2010-03-18 22:08:54 +00:00
|
|
|
+<Policy allowallforanybody>
|
2014-01-29 15:05:09 +00:00
|
|
|
+ # Allow anybody to access job's private values:
|
|
|
|
|
+ JobPrivateAccess all
|
|
|
|
|
+ # Make none of the job values to be private:
|
|
|
|
|
+ JobPrivateValues none
|
|
|
|
|
+ # Allow anybody to access subscription's private values:
|
|
|
|
|
+ SubscriptionPrivateAccess all
|
|
|
|
|
+ # Make none of the subscription values to be private:
|
|
|
|
|
+ SubscriptionPrivateValues none
|
|
|
|
|
+ # Allow anybody to do all IPP operations:
|
|
|
|
|
+ # Currently the IPP operations Validate-Job Cancel-Jobs Cancel-My-Jobs Close-Job CUPS-Get-Document
|
|
|
|
|
+ # must be additionally exlicitly specified because those IPP operations are not included
|
|
|
|
|
+ # in the "All" wildcard value - otherwise cupsd prints error messages of the form
|
|
|
|
|
+ # "No limit for Validate-Job defined in policy allowallforanybody and no suitable template found."
|
|
|
|
|
+ <Limit All Validate-Job Cancel-Jobs Cancel-My-Jobs Close-Job CUPS-Get-Document>
|
2010-03-18 22:08:54 +00:00
|
|
|
+ Order deny,allow
|
|
|
|
|
+ Allow from all
|
|
|
|
|
+ </Limit>
|
|
|
|
|
+</Policy>
|
2010-11-12 08:51:26 +00:00
|
|
|
+# Explicitly set the CUPS 'default' policy to be used by default:
|
2010-03-18 22:08:54 +00:00
|
|
|
+DefaultPolicy default
|
|
|
|
|
+
|
2014-01-29 15:05:09 +00:00
|
|
|
#
|
|
|
|
|
# End of "$Id: cupsd.conf.in 9407 2010-12-09 21:24:51Z mike $".
|
|
|
|
|
#
|
